Описание
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 3 | httpd | Will not fix | ||
| JBEWS 1.0 for RHEL 4 | ant | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | antlr | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | bcel | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | cglib | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | dom4j | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | ecj | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | glassfish-jaf | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | glassfish-javamail | Fixed | RHSA-2011:0897 | 22.06.2011 |
| JBEWS 1.0 for RHEL 4 | glassfish-jsf | Fixed | RHSA-2011:0897 | 22.06.2011 |
Показывать по
Дополнительная информация
Статус:
EPSS
5 Medium
CVSS2
Связанные уязвимости
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Memory leak in the apr_brigade_split_line function in buckets/apr_brig ...
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
EPSS
5 Medium
CVSS2